Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219447.roa
File: AS219447.roa (raw, json)
Hash identifier: Tb3H28nEGKwNLtHueZcBkZnBZfF2cuyQx0WL3B2Y3Nc=
Subject key identifier: 14:0C:FC:66:6E:93:7E:D8:84:6C:AD:5D:83:ED:A9:8E:2B:C7:39:FB
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 21D20C5BCA15E38E0FDAAF5473E04E7E9CA72863
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219447.roa
Signing time: Tue 20 Oct 2026 03:16:45 +0000
ROA not before: Tue 20 Oct 2026 03:11:45 +0000
ROA not after: Tue 19 Oct 2027 03:16:45 +0000
asID: 219447
IP address blocks: 91.124.20.0/24 maxlen: 24
91.124.105.0/24 maxlen: 24
92.113.58.0/24 maxlen: 24
178.93.169.0/24 maxlen: 24
178.94.54.0/24 maxlen: 24
178.94.68.0/24 maxlen: 24
178.94.116.0/24 maxlen: 24
178.95.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 05:38:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:d2:0c:5b:ca:15:e3:8e:0f:da:af:54:73:e0:4e:7e:9c:a7:28:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 20 03:11:45 2026 GMT
Not After : Oct 19 03:16:45 2027 GMT
Subject: CN=140CFC666E937ED8846CAD5D83EDA98E2BC739FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:94:ef:29:60:c8:ff:13:bb:fb:fb:6b:ad:29:
9b:a6:48:c3:96:14:91:ff:2c:68:cb:3a:4c:c6:bf:
5f:e5:bf:11:e7:1b:77:99:46:d0:63:ee:14:8f:b3:
30:15:f9:e0:68:11:b0:fc:da:41:a0:97:39:23:33:
83:5a:76:f4:bb:6e:e2:ad:b0:57:d5:a1:39:58:52:
5a:03:f4:44:ec:60:4a:bd:50:10:7b:0e:3b:9b:a5:
2f:48:af:aa:35:4b:61:6f:4a:9b:9d:d1:92:16:fd:
64:3f:99:56:41:38:7e:f9:9f:08:06:f9:c3:70:6d:
82:e2:1b:04:9c:86:bc:36:0d:4b:c6:28:4a:26:f5:
a1:26:97:36:d1:89:36:c8:07:63:fb:a1:cd:0e:e1:
d2:d6:ea:9b:53:aa:f9:f6:3a:88:04:a8:b0:16:ac:
45:68:00:f0:fb:56:20:37:83:0c:39:e6:23:f6:e0:
b6:a2:eb:70:73:b5:5c:bf:cf:3d:3c:36:3e:d3:c9:
8e:5b:6b:17:79:c5:09:e2:cc:0b:be:89:6d:ff:b5:
69:d7:6e:a2:1b:80:c1:dd:30:ea:b2:49:d8:95:df:
53:d3:31:c9:85:04:ff:2e:96:2b:b7:87:e6:88:5d:
26:72:de:d6:40:67:37:9b:2a:a7:b5:ac:6b:5d:b8:
c0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0C:FC:66:6E:93:7E:D8:84:6C:AD:5D:83:ED:A9:8E:2B:C7:39:FB
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS219447.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.20.0/24
91.124.105.0/24
92.113.58.0/24
178.93.169.0/24
178.94.54.0/24
178.94.68.0/24
178.94.116.0/24
178.95.21.0/24
Signature Algorithm: sha256WithRSAEncryption
34:d4:13:08:83:bd:48:14:31:1c:55:4f:36:28:9d:16:5f:5b:
69:b3:12:c6:0f:2e:44:b7:e8:7f:88:3c:32:42:dc:1e:2c:83:
82:31:e7:91:b6:c3:74:3c:6f:8d:82:7d:5a:c6:d5:e6:01:53:
ac:03:c5:4d:44:38:04:60:7a:43:e7:7c:94:b4:85:2e:72:4a:
91:43:ae:5a:d5:e5:9a:a2:a3:4e:16:6e:33:67:4d:b5:83:83:
1a:32:64:0f:df:d4:13:3b:12:f0:da:40:28:83:18:09:3b:8b:
c3:b1:db:89:47:a3:a9:d9:fa:0d:7f:ac:a3:86:27:b4:01:33:
18:85:6c:fe:8a:71:87:e7:7d:a1:2a:25:e5:d0:ac:71:b8:f1:
33:cd:d2:b5:63:e8:1e:5a:a4:f6:69:b2:3d:07:35:c2:bd:e7:
72:95:64:f1:fe:aa:08:57:1c:87:6e:28:f9:6b:2b:fb:0a:b1:
62:78:ac:a9:1c:8e:02:18:43:e0:d6:a8:75:c2:e4:32:1e:60:
f3:a8:e5:68:71:ef:ec:e8:40:27:af:7e:13:ac:9d:b6:02:51:
4d:3b:e1:22:b8:72:32:66:c6:95:1a:71:ba:6f:5f:fe:c8:aa:
04:16:07:38:37:39:ae:42:4e:e7:e9:90:98:ae:45:1a:4c:af:
47:7f:25:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 10:44:03 2026 by rpki-client